spire

!Production...

CLEANSTART-2026-FA45866 Security fix for CVE-2026-24122 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kyverno 1.15.3-r3, kyverno 1.16.4-r3, kyverno 1.17.2-r2, spire-server 1.14.7-r0

CVE-2026-24122 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UC33552 Security fix for CVE-2026-4659 applied in: spire-server-fips 1.14.5-r1

Security vulnerability affects the spire-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZX16649 Security fix for CVE-2026-49835 applied in: cosign 3.1.1-r1, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r0, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49835 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OE12981 Security fix for CVE-2026-49834 applied in: cosign 3.1.1-r2, cosign 3.1.2-r1, harbor-trivy-adapter-fips 0.36.0-r1, kyverno 1.17.2-r2, kyverno 1.18.1-r2, policy-controller-fips 0.15.1-r1, spire-server 1.14.7-r0, spire-server-fips 1.15.1-r1, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1

CVE-2026-49834 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WB69722 Security fix for CVE-2026-39395 applied in: kyverno 1.15.3-r3, kyverno 1.16.4-r3, kyverno 1.17.2-r2, kyverno 1.18.2-r0, spire-server 1.14.7-r0

CVE-2026-39395 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JX39152 Security fixes in spire-server 1.14.7-r0

Package spire-server version 1.14.7-r0 fixes 16 vulnerabilities: CVE-2026-49834, CVE-2026-24122, CVE-2026-39395, CVE-2026-41178, CVE-2026-41568...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kots, k3s, kine, envoy-gateway-fips, commercial-expanso-edge, commercial-chainloop-backend, envoy-gateway, spire-server, commercial-grafana...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: boring-registry, falcoctl-fips, minio-fips, external-secrets-fips, minio, boring-registry-fips, spire-server-fips, spire-server, mc, mc-fips, falcoctl...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: boring-registry, falcoctl-fips, gitsign, external-secrets-fips, minio, tekton-chains, kubescape, spire-server-fips, vexctl, cosign-fips, spire-server, mc, falcoctl...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: skopeo, opentelemetry-operator, amazon-cloudwatch-agent-operator-fips, cri-tools, spire-server-fips, jfrog-cli, kubedock-fips, portieris, osv-scanner, grafana-alloy, gatekeeper, opentelemetry-collector-contrib-fips, neuvector-fips, neuvector-scanner-fips,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: aactl, spire-server-fips, tekton-chains-fips, tekton-chains, ko, ko-fips, vexctl, neuvector-sigstore-interface, policy-controller-fips, gitsign, zot, flux-source-controller, zarf, wolfictl, melange, slsa-verifier, apko, tkn, chainctl, goreleaser, skaffold,...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: k3s, spire-server, kine, envoy-gateway, kots...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: policy-controller, cosign, conftest, zot, k8sgpt, zarf, spire-server, snyk-cli, tfsec, kubescape, opa, kots...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: policy-controller, trivy, cosign, conftest, spire-server, witness, tfsec, kyverno-notation-aws, kots...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dex, trivy, k3s, dagger, temporal, melange, tflint, ferretdb, k3d, ksops, dbmate, pulumi-language-dotnet, kubernetes-csi-external-provisioner, conftest, restic, cloudnative-pg, spicedb, grafana-mimir, spire-server, zarf, cilium-cli, sops, certificate-transparency,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: trivy, docker, falcoctl, trivy-operator, tflint, teleport, cosign, tkn, zarf, spire-server, gh, buildkitd, gitsign, goreleaser, witness, kubescape, sigstore-scaffolding, kyverno-notation-aws, flux-source-controller, policy-controller, ko, zot,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: minio, spire-server, mc, vexctl, falcoctl, boring-registry, kubescape, tekton-chains, gitsign...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: minio, spire-server, mc, falcoctl, boring-registry...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: trivy, pulumi, up, harbor-registry, wal-g, falcoctl, rekor, secrets-store-csi-driver-provider-azure, argo-events, ksops, flux-image-reflector-controller, cosign, rclone, restic, thanos, tkn, bank-vaults, grafana-mimir, py3-cassandra-medusa, spire-server, velero, zarf...